Privacy Policy
CareTech Human Inc. Effective date: August 15, 2026 · Last updated: September 28, 2026
1. Who we are and what this policy covers
CareTech Human Inc. (“CareTech Human”, “we”, “us”) is a Delaware corporation based in Ithaca, New York. We develop sensing devices for the home bathroom: Biomonix, a wellness device, and UroWell, a uroflowmetry device.
This policy covers the personal data we collect through our websites:
- caretechhuman.com, our corporate site
- the Biomonix product site at biomonix.caretechhuman.com
It explains what we collect, why, who else can see it, how long we keep it, and what rights you have.
What this policy does not cover yet. Our devices are not yet shipping. We do not currently collect any measurement data from a device, and this policy does not describe how such data would be handled. Before any device collects data from a user, we will publish an updated policy that covers it, and we will ask for your consent where the law requires it.
This policy also does not cover websites and services run by other companies, including sites we link to.
2. What we collect
When you use a contact form
Name, email address, organization, phone number where you provide it, the subject you select, and the content of your message.
When you apply for a job
Name, email address, the content of your message, and your resume or CV if you attach one. Anything else you choose to include in those documents.
When you join the Biomonix Early Access list
Your email address.
When you place a deposit
We use Stripe to process payments. You enter your card details on a page hosted by Stripe. Card numbers and payment credentials never reach our servers and we never store them.
From Stripe we receive confirmation of the payment, the amount, the date, the last four digits of the card, and the email address and billing details you gave Stripe. Stripe processes your payment data as an independent controller under its own privacy policy.
Automatically, when you visit our sites
IP address, browser type and version, device type, operating system, referring page, pages viewed, and the time of your visit. This comes from our server logs and from the analytics tools described in section 5.
What we do not collect
We do not collect health data through our websites. We do not ask for medical history, symptoms, diagnoses, or measurements from your body.
Signing up for information about a health product is not, by itself, information about your health, and we do not treat it as such or draw conclusions about your health from it.
We do not knowingly collect personal data from anyone under 18. See section 11.
3. Why we use it, and our legal basis
If you are in the European Economic Area or the United Kingdom, the GDPR and the UK GDPR require us to have a legal basis for each purpose. This table sets it out.
| What we do | Why | Legal basis (EEA and UK) |
|---|---|---|
| Reply to your message | To answer questions and follow up on business inquiries | Legitimate interest in responding to people who contact us |
| Review job applications | To assess candidates and communicate about the role | Steps taken at your request before entering a contract, and our legitimate interest in recruiting |
| Keep you on the Early Access list | To send you updates about Biomonix availability | Your consent |
| Take and refund deposits | To hold your place and your price, and to refund you | Performance of a contract with you |
| Keep records of payments | To meet tax and accounting obligations | Legal obligation |
| Measure how our sites are used | To understand which pages people read and where visitors come from, on both sites | Legitimate interest in understanding and improving our sites |
| Show and measure advertising | To reach people who may be interested in Biomonix | Not applicable — the Meta Pixel loads only for visitors in the United States |
| Keep our sites secure | To detect abuse, spam, and technical failures | Legitimate interest in protecting our systems |
You can withdraw consent at any time. Every marketing email has an unsubscribe link. Withdrawing consent does not affect what we did before you withdrew it.
4. Who else can see your data
We do not sell your personal data. We do not share it with other companies for their own marketing.
We use service providers who process data on our behalf, under contract and on our instructions:
| Provider | What it does | Where data is processed |
|---|---|---|
| Lovable Cloud (running on Supabase) | Hosts our sites and stores form submissions and uploaded files | Ireland (corporate site) and Germany (Biomonix site) |
| Stripe | Processes deposits and payments | United States and other countries |
| Resend | Sends our notification and marketing emails | United States |
| Google Analytics (see the Google Privacy Policy) | Measures site usage on both sites | United States and other countries |
| Microsoft Clarity (see the Microsoft Privacy Statement) | Measures how visitors use pages, including session recordings with typed text hidden, on both sites | United States and other countries |
| Meta Pixel (Biomonix site only) | Measures advertising performance, for United States visitors only | United States and other countries |
Inside the company, form submissions and job applications are sent to a small number of named employees who handle them.
We may also disclose personal data when the law requires it, to respond to a valid legal request, to protect our rights or the safety of others, or in connection with a merger, acquisition, or sale of assets. If that last case happens, we will tell you before your data becomes subject to a different privacy policy.
Advertising and the Meta Pixel
The Biomonix site uses the Meta Pixel. It loads only for visitors in the United States. It tells Meta when someone views a page, joins the Early Access list, starts checkout, or pays the deposit. We do not send Meta your email address, name, or any other details you type into our forms.
Meta can connect this information to your Meta account and use it for its own purposes, including advertising. Under California law this counts as “sharing” personal information for cross-context behavioral advertising, even though no money changes hands. You can opt out. See section 9.
5. Cookies and similar technologies
Cookies are small files stored by your browser. Here is what we use:
Necessary cookies keep the site working: security and load balancing. These are always on.
Analytics cookies (Google Analytics and Microsoft Clarity) measure how the sites are used, on both caretechhuman.com and the Biomonix site. We do not use them for advertising. Clarity records how visitors use our pages, with any text you type hidden.
Advertising cookies (Meta Pixel) load only on the Biomonix site, and only for visitors in the United States. They measure whether our ads work.
Our own opt-out cookie remembers, on the Biomonix site, that you opted out of sharing your information, so the Meta Pixel stays off. See section 9.
Early Access recognition code (Biomonix site). After you join the Biomonix Early Access list, the Biomonix site stores a random code in your browser's local storage so it can recognize you on a later visit and prefill your email at checkout. The code does not contain your email address. It stays in your browser until you clear your browser data.
For the full list of cookies, what each one does, and how to opt out, see our Cookie Policy.
6. Where your data is stored
Our databases are hosted in the European Union: Ireland for the corporate site, Germany for the Biomonix site.
Some of our service providers are based in the United States and may process your data there. When we transfer personal data out of the EEA or the UK, we rely on the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum, together with the additional safeguards those providers offer.
You can ask us for a copy of the transfer safeguards we rely on. Write to the address in section 12.
7. How long we keep it
| What | How long | Why |
|---|---|---|
| Contact form submissions | 36 months from your last contact with us | Business inquiries often resume after long gaps |
| Job applications and resumes | 4 years from the date of the application or the hiring decision | California Government Code section 12946 requires personnel records to be kept for four years |
| Early Access list | Until you unsubscribe, and in any case removed after 24 months with no activity | |
| Payment and deposit records | 7 years | Tax and accounting requirements |
| Analytics data | 14 months | The maximum retention period Google Analytics offers |
| Server logs | 90 days | Long enough to investigate a security incident |
When a period ends we delete the data or remove anything that identifies you.
8. Your rights in the EEA and the UK
If the GDPR or the UK GDPR applies to you, you have the right to:
- ask what personal data we hold about you and get a copy
- have inaccurate data corrected
- have your data deleted
- restrict how we use your data
- object to processing we base on legitimate interest
- receive your data in a portable format
- withdraw consent at any time
To use any of these rights, write to info@caretechhuman.com. We answer within one month. We may ask you to confirm your identity first.
If you think we have handled your data incorrectly, you can complain to your national data protection authority. In the UK this is the Information Commissioner's Office. We would rather hear from you first so we can put it right.
9. Your rights in the United States
If you live in the United States, you have the right to:
- know what personal information we collect, use, and share
- get a copy of that information
- correct inaccurate information
- ask us to delete personal information we hold
- opt out of the sale or sharing of personal information
- not be treated differently for using any of these rights
Several states, including California, Colorado, Connecticut, Texas, Virginia, and Oregon, give their residents rights of this kind. Rather than apply them state by state, we extend the rights above to every US resident.
We do not sell personal information for money. Under California and other state laws, the Meta Pixel on the Biomonix site counts as “sharing” personal information for cross-context behavioral advertising, as described in section 4.
To opt out, use the “Do Not Sell or Share My Personal Information” link on the Biomonix site. We also treat the Global Privacy Control signal as a request to opt out: when your browser sends it, the Meta Pixel does not load.
Sensitive personal information. We do not currently collect sensitive personal information as California law defines it, and we do not use any personal information for purposes that would trigger the right to limit its use.
To make a request, write to info@caretechhuman.com. You can use an authorized agent. We will verify your identity before we act.
In the twelve months before the date of this policy, we collected the categories of personal information listed in section 2, for the purposes listed in section 3, and disclosed them to the providers listed in section 4.
10. Security
We protect personal data with encryption in transit and at rest, access controls that limit who inside the company can see what, and private file storage for uploaded documents. Uploaded resumes are not publicly accessible and cannot be reached by a direct link.
No system is completely secure. We cannot promise that your data will never be compromised, but we will tell you and the relevant authority if a breach affects you and the law requires notice.
11. Children
Our sites and products are for adults. You must be 18 or older to use our sites, join the Early Access list, or place a deposit.
We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, write to info@caretechhuman.com and we will delete it.
12. Changes to this policy
We update this policy when our products or our data practices change. The date at the top shows when we last changed it.
If a change matters to you, for example if we begin collecting data from a device, we will tell you before it takes effect. We will email you where we have your address, and we will ask for your consent where the law requires it.
13. How to reach us
CareTech Human Inc.
526 Campus Road, Weill Hall 407a
Ithaca, NY 14853
United States
Email: info@caretechhuman.com
For privacy questions, data requests, or complaints, email us at the address above. Put “Privacy” in the subject line so it reaches the right person.